Skills/ClawHub/alibabacloud-bailian-managed-agent

alibabacloud-bailian-managed-agent@0.0.2

CAUTION

Publisher claims: "Version v20261015 (date-based release, YYYYMMDD). Explain, evaluate, demonstrate, provision, and integrate Alibaba Cloud Bailian Managed Agent (CMA / ManagedAgents). Use for Bailian Managed Agent product selection, sales pitches, customer solutions, hands-on PoCs, scheduled report agents, managed environments, and Python/Java backend integration. Prefer Bailian CLI (bl) for quick trials and resource provisioning; use HTTP API or verified SDKs for customer system integration, and API fallback when CLI capability remains unavailable after an update attempt. Not for generic agent development or unrelated cloud sandboxes." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher sdk-team · joined 2 days agoInstalls 211Last detonated 27 h ago
Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

CRITICAL
HTML comment carrying imperative instructions to the agentreferences/tutorials/index.md:65 · HTML comment carrying imperative instructions to the agent
AST01
CRITICAL
Access to sensitive file pathsreferences/integration/code-python.md:56 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsreferences/integration/code-python.md:460 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Pipe-to-shell patternreferences/workflows/cli-api-routing.md:11 · Pipe-to-shell pattern — downloads and immediately executes remote code
AST06
MEDIUM
File type combined with upload actionreferences/integration/code-java.md:468 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actionreferences/integration/api-endpoints.md:191 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actionreferences/cookbook/01-get-started-data-analysis-agent.md:583 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actionreferences/tutorials/03-mount-files.md:219 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actionreferences/cookbook/index.md:89 · File type combined with upload action — agent may exfiltrate local data files
AST07
HIGH
npx invocation of non-well-known packagereferences/workflows/cli-api-routing.md:13 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Process kill commandreferences/cookbook/06-webhook-event-notifications.md:163 · Process kill command — agent can terminate processes
AST05
MEDIUM
File type combined with upload actionreferences/tutorials/03-mount-files.md:201 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actionreferences/integration/api-endpoints.md:190 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actionreferences/integration/api-quickstart.md:208 · File type combined with upload action — agent may exfiltrate local data files
AST07
HIGH
Process kill commandreferences/product/faq.md:89 · Process kill command — agent can terminate processes
AST05
MEDIUM
File type combined with upload actionreferences/tutorials/03-mount-files.md:20 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actionreferences/cookbook/01-get-started-data-analysis-agent.md:263 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actionreferences/integration/api-quickstart.md:24 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actionreferences/workflows/cli-api-routing.md:34 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actionreferences/integration/api-quickstart.md:209 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actionscripts/cookbook_smoke.py:331 · File type combined with upload action — agent may exfiltrate local data files
AST07
LOW
Unpinned dependencyreferences/workflows/cli-api-routing.md:10 · Unpinned dependency
AST06
MEDIUM
File type combined with upload actionreferences/integration/api-quickstart.md:86 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
Remote installer piped to shellreferences/workflows/cli-api-routing.md:11 · Remote installer piped to shell
AST07
MEDIUM
File type combined with upload actionreferences/integration/code-python.md:308 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actionreferences/tutorials/03-mount-files.md:292 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actionreferences/product/concepts.md:194 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actionreferences/cookbook/11-client-integration-practice.md:21 · File type combined with upload action — agent may exfiltrate local data files
AST07
HIGH
Outbound HTTP to raw IP addressreferences/cookbook/06-webhook-event-notifications.md:81 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
HIGH
Process kill commandreferences/tutorials/05-environment-packages.md:122 · Process kill command — agent can terminate processes
AST05
MEDIUM
File type combined with upload actionreferences/cookbook/01-get-started-data-analysis-agent.md:195 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
URL using raw IP addressreferences/cookbook/06-webhook-event-notifications.md:81 · URL using raw IP address — may bypass domain-based filtering
AST07
MEDIUM
File type combined with upload actionreferences/cookbook/11-client-integration-practice.md:17 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actionreferences/cookbook/01-get-started-data-analysis-agent.md:355 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actionreferences/cookbook/index.md:76 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actionreferences/cookbook/01-get-started-data-analysis-agent.md:531 · File type combined with upload action — agent may exfiltrate local data files
AST07